primitive-admin 1.1.0-alpha.4 → 1.1.0-alpha.41

package/dist/src/lib/credentials-store.js

@@ -0,0 +1,307 @@
+/**
+ * Credentials storage with dual-mode support.
+ *
+ * Mode A (project mode): credentials live at
+ *   <projectRoot>/.primitive/credentials.json
+ * with per-environment slots:
+ *   {
+ *     "environments": {
+ *       "dev":  { "accessToken": "...", "refreshToken": "...", ... },
+ *       "prod": { ... }
+ *     }
+ *   }
+ *
+ * Mode B (legacy mode): no .primitive/config.json in scope, so we fall back to
+ *   ~/.primitive/credentials.json
+ * with the flat Credentials shape the CLI has always used.
+ *
+ * The legacy mode is still the "global default" for users who haven't
+ * run `primitive init` yet.
+ */
+import { chmodSync, existsSync, mkdirSync, readFileSync, unlinkSync, writeFileSync, } from "fs";
+import { homedir } from "os";
+import { join } from "path";
+import { getCurrentEnvironment, getProjectConfig } from "./env-resolver.js";
+export const PROJECT_LOCAL_DIR = ".primitive";
+export const PROJECT_CREDENTIALS_FILENAME = "credentials.json";
+/**
+ * Resolves the legacy config dir on each call (rather than capturing it
+ * at module load) so tests and environment variables can override it
+ * after the module has already been imported.
+ */
+function getLegacyConfigDir() {
+    return process.env.PRIMITIVE_CONFIG_DIR || join(homedir(), ".primitive");
+}
+function getLegacyCredentialsFile() {
+    return join(getLegacyConfigDir(), PROJECT_CREDENTIALS_FILENAME);
+}
+/** Returns true when a .primitive/config.json is in scope (project mode active). */
+export function isProjectMode() {
+    return getProjectConfig() !== null;
+}
+/**
+ * Returns the path to the credentials file that will be used, based on
+ * whether we're in project mode or legacy mode.
+ */
+export function getCredentialsFilePath() {
+    const env = resolveCurrentEnvironment();
+    if (env) {
+        return join(env.projectRoot, PROJECT_LOCAL_DIR, PROJECT_CREDENTIALS_FILENAME);
+    }
+    return getLegacyCredentialsFile();
+}
+/**
+ * Resolves the current environment. If an environment CAN'T be resolved
+ * (e.g. --env points at an unknown name), this throws — we never silently
+ * fall back to legacy credentials because a typo in the env name must not
+ * cause the CLI to operate against the wrong app/server.
+ *
+ * Returns null only in genuine legacy mode (no project config found at all).
+ */
+function resolveCurrentEnvironment() {
+    return getCurrentEnvironment();
+}
+function ensureDir(dir) {
+    if (!existsSync(dir)) {
+        mkdirSync(dir, { recursive: true, mode: 0o700 });
+    }
+}
+function readJsonFile(path) {
+    try {
+        if (!existsSync(path))
+            return null;
+        const data = readFileSync(path, "utf-8");
+        return JSON.parse(data);
+    }
+    catch {
+        return null;
+    }
+}
+/**
+ * Loads a legacy (global) credentials file. Used for backwards compat.
+ */
+function loadLegacyCredentials() {
+    return readJsonFile(getLegacyCredentialsFile());
+}
+/**
+ * Loads the project credentials file, if present. Never throws — returns
+ * an empty shape when the file is missing or unreadable.
+ */
+function loadProjectCredentialsFile(projectRoot) {
+    const path = join(projectRoot, PROJECT_LOCAL_DIR, PROJECT_CREDENTIALS_FILENAME);
+    const data = readJsonFile(path);
+    if (!data || typeof data !== "object" || !data.environments) {
+        return { environments: {} };
+    }
+    return data;
+}
+function writeProjectCredentialsFile(projectRoot, file) {
+    const dir = join(projectRoot, PROJECT_LOCAL_DIR);
+    ensureDir(dir);
+    const path = join(dir, PROJECT_CREDENTIALS_FILENAME);
+    writeFileSync(path, JSON.stringify(file, null, 2), { mode: 0o600 });
+    try {
+        chmodSync(path, 0o600);
+    }
+    catch {
+        // Best-effort on Windows / weird filesystems
+    }
+}
+/**
+ * Reads credentials for the current environment (project mode) or the
+ * legacy global file. Returns the standard Credentials shape so existing
+ * callers don't need to change.
+ *
+ * In project mode, we blend the per-env stored creds with the serverUrl
+ * and appId from .primitive/config.json to produce the Credentials the rest of
+ * the CLI expects.
+ */
+export function loadCredentialsStore() {
+    const env = resolveCurrentEnvironment();
+    if (!env) {
+        return loadLegacyCredentials();
+    }
+    const file = loadProjectCredentialsFile(env.projectRoot);
+    const stored = file.environments[env.name];
+    if (!stored)
+        return null;
+    return {
+        serverUrl: env.config.apiUrl,
+        accessToken: stored.accessToken,
+        refreshToken: stored.refreshToken,
+        expiresAt: stored.expiresAt,
+        adminId: stored.adminId,
+        email: stored.email,
+        role: stored.role,
+        name: stored.name,
+        // Prefer the project-level appId (canonical); fall back to the stored
+        // per-session current app for compatibility.
+        currentAppId: env.config.appId || stored.currentAppId,
+        currentAppName: env.config.appName || stored.currentAppName,
+        globalAdminAppId: stored.globalAdminAppId,
+    };
+}
+/**
+ * Saves credentials. In project mode, writes to the per-env slot in the
+ * project credentials file. In legacy mode, writes the global file.
+ *
+ * The serverUrl on the incoming Credentials is used as-is for legacy
+ * mode, and ignored in project mode (the env's apiUrl is canonical).
+ */
+export function saveCredentialsStore(credentials) {
+    const env = resolveCurrentEnvironment();
+    if (!env) {
+        ensureDir(getLegacyConfigDir());
+        writeFileSync(getLegacyCredentialsFile(), JSON.stringify(credentials, null, 2), {
+            mode: 0o600,
+        });
+        try {
+            chmodSync(getLegacyCredentialsFile(), 0o600);
+        }
+        catch {
+            // Best-effort
+        }
+        return;
+    }
+    const file = loadProjectCredentialsFile(env.projectRoot);
+    file.environments[env.name] = {
+        accessToken: credentials.accessToken,
+        refreshToken: credentials.refreshToken,
+        expiresAt: credentials.expiresAt,
+        adminId: credentials.adminId,
+        email: credentials.email,
+        role: credentials.role,
+        name: credentials.name,
+        globalAdminAppId: credentials.globalAdminAppId,
+        // Only persist currentAppId/Name when they're NOT already declared
+        // in .primitive/config.json — otherwise the project config is the source of
+        // truth.
+        currentAppId: env.config.appId ? undefined : credentials.currentAppId,
+        currentAppName: env.config.appName ? undefined : credentials.currentAppName,
+    };
+    writeProjectCredentialsFile(env.projectRoot, file);
+}
+/**
+ * Clears credentials for the current environment (project mode) or
+ * deletes the legacy file (legacy mode).
+ */
+export function clearCredentialsStore() {
+    const env = resolveCurrentEnvironment();
+    if (!env) {
+        try {
+            if (existsSync(getLegacyCredentialsFile())) {
+                unlinkSync(getLegacyCredentialsFile());
+            }
+        }
+        catch {
+            // Ignore
+        }
+        return;
+    }
+    const file = loadProjectCredentialsFile(env.projectRoot);
+    delete file.environments[env.name];
+    writeProjectCredentialsFile(env.projectRoot, file);
+}
+/**
+ * Removes the credentials slot for the named environment in a specific
+ * project's credentials file. Used by `env remove` so stale tokens from a
+ * previously-removed environment can never be silently re-used if the same
+ * name is later added back. Never throws.
+ */
+export function clearCredentialsForEnvInProject(projectRoot, envName) {
+    try {
+        const file = loadProjectCredentialsFile(projectRoot);
+        if (file.environments[envName]) {
+            delete file.environments[envName];
+            writeProjectCredentialsFile(projectRoot, file);
+        }
+    }
+    catch {
+        // Best-effort — removal is not a hard requirement for env removal to succeed.
+    }
+}
+/**
+ * Lists all environments that have stored credentials in project mode.
+ * Returns an empty array in legacy mode.
+ */
+export function listAuthenticatedEnvironments() {
+    const env = resolveCurrentEnvironment();
+    if (!env)
+        return [];
+    const file = loadProjectCredentialsFile(env.projectRoot);
+    return Object.keys(file.environments);
+}
+/**
+ * Updates the "current app" in credential storage. In project mode with a
+ * project-level appId this is a no-op (the project config is canonical).
+ */
+export function setCurrentAppStore(appId, appName) {
+    const env = resolveCurrentEnvironment();
+    if (!env) {
+        // Legacy mode — mutate the global credentials file directly.
+        const creds = loadLegacyCredentials();
+        if (!creds) {
+            throw new Error("Not logged in. Run 'primitive login' first.");
+        }
+        creds.currentAppId = appId;
+        creds.currentAppName = appName;
+        ensureDir(getLegacyConfigDir());
+        writeFileSync(getLegacyCredentialsFile(), JSON.stringify(creds, null, 2), {
+            mode: 0o600,
+        });
+        return;
+    }
+    // Project mode: if the env already has an appId in .primitive/config.json, we
+    // don't overwrite it here (use `primitive env use` or edit .primitive/config.json
+    // to change the project binding). We *do* store a per-session override
+    // in credentials for environments without a declared appId.
+    if (env.config.appId) {
+        // No-op: env is bound to a specific appId in .primitive/config.json
+        return;
+    }
+    const file = loadProjectCredentialsFile(env.projectRoot);
+    const slot = file.environments[env.name];
+    if (!slot) {
+        throw new Error(`Not logged in to environment "${env.name}". Run 'primitive login --env ${env.name}' first.`);
+    }
+    slot.currentAppId = appId;
+    slot.currentAppName = appName;
+    writeProjectCredentialsFile(env.projectRoot, file);
+}
+/**
+ * Clears the "current app" for the current environment.
+ */
+export function clearCurrentAppStore() {
+    const env = resolveCurrentEnvironment();
+    if (!env) {
+        const creds = loadLegacyCredentials();
+        if (!creds)
+            return;
+        delete creds.currentAppId;
+        delete creds.currentAppName;
+        ensureDir(getLegacyConfigDir());
+        writeFileSync(getLegacyCredentialsFile(), JSON.stringify(creds, null, 2), {
+            mode: 0o600,
+        });
+        return;
+    }
+    if (env.config.appId) {
+        // Can't clear a project-bound app; the user should edit .primitive/config.json.
+        return;
+    }
+    const file = loadProjectCredentialsFile(env.projectRoot);
+    const slot = file.environments[env.name];
+    if (!slot)
+        return;
+    delete slot.currentAppId;
+    delete slot.currentAppName;
+    writeProjectCredentialsFile(env.projectRoot, file);
+}
+/**
+ * Returns the legacy credentials file, if one exists. Used by migration
+ * prompts that want to detect a pre-project-config install.
+ */
+export function peekLegacyCredentials() {
+    return loadLegacyCredentials();
+}
+//# sourceMappingURL=credentials-store.js.map

package/dist/src/lib/credentials-store.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"credentials-store.js","sourceRoot":"","sources":["../../../src/lib/credentials-store.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;GAmBG;AAEH,OAAO,EACL,SAAS,EACT,UAAU,EACV,SAAS,EACT,YAAY,EACZ,UAAU,EACV,aAAa,GACd,MAAM,IAAI,CAAC;AACZ,OAAO,EAAE,OAAO,EAAE,MAAM,IAAI,CAAC;AAC7B,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AAE5B,OAAO,EAAE,qBAAqB,EAAE,gBAAgB,EAAE,MAAM,mBAAmB,CAAC;AAE5E,MAAM,CAAC,MAAM,iBAAiB,GAAG,YAAY,CAAC;AAC9C,MAAM,CAAC,MAAM,4BAA4B,GAAG,kBAAkB,CAAC;AAE/D;;;;GAIG;AACH,SAAS,kBAAkB;IACzB,OAAO,OAAO,CAAC,GAAG,CAAC,oBAAoB,IAAI,IAAI,CAAC,OAAO,EAAE,EAAE,YAAY,CAAC,CAAC;AAC3E,CAAC;AAED,SAAS,wBAAwB;IAC/B,OAAO,IAAI,CAAC,kBAAkB,EAAE,EAAE,4BAA4B,CAAC,CAAC;AAClE,CAAC;AA0BD,oFAAoF;AACpF,MAAM,UAAU,aAAa;IAC3B,OAAO,gBAAgB,EAAE,KAAK,IAAI,CAAC;AACrC,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,sBAAsB;IACpC,MAAM,GAAG,GAAG,yBAAyB,EAAE,CAAC;IACxC,IAAI,GAAG,EAAE,CAAC;QACR,OAAO,IAAI,CAAC,GAAG,CAAC,WAAW,EAAE,iBAAiB,EAAE,4BAA4B,CAAC,CAAC;IAChF,CAAC;IACD,OAAO,wBAAwB,EAAE,CAAC;AACpC,CAAC;AAED;;;;;;;GAOG;AACH,SAAS,yBAAyB;IAChC,OAAO,qBAAqB,EAAE,CAAC;AACjC,CAAC;AAED,SAAS,SAAS,CAAC,GAAW;IAC5B,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;QACrB,SAAS,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IACnD,CAAC;AACH,CAAC;AAED,SAAS,YAAY,CAAI,IAAY;IACnC,IAAI,CAAC;QACH,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC;YAAE,OAAO,IAAI,CAAC;QACnC,MAAM,IAAI,GAAG,YAAY,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;QACzC,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,CAAM,CAAC;IAC/B,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED;;GAEG;AACH,SAAS,qBAAqB;IAC5B,OAAO,YAAY,CAAc,wBAAwB,EAAE,CAAC,CAAC;AAC/D,CAAC;AAED;;;GAGG;AACH,SAAS,0BAA0B,CAAC,WAAmB;IACrD,MAAM,IAAI,GAAG,IAAI,CAAC,WAAW,EAAE,iBAAiB,EAAE,4BAA4B,CAAC,CAAC;IAChF,MAAM,IAAI,GAAG,YAAY,CAAyB,IAAI,CAAC,CAAC;IACxD,IAAI,CAAC,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,CAAC,IAAI,CAAC,YAAY,EAAE,CAAC;QAC5D,OAAO,EAAE,YAAY,EAAE,EAAE,EAAE,CAAC;IAC9B,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,2BAA2B,CAClC,WAAmB,EACnB,IAA4B;IAE5B,MAAM,GAAG,GAAG,IAAI,CAAC,WAAW,EAAE,iBAAiB,CAAC,CAAC;IACjD,SAAS,CAAC,GAAG,CAAC,CAAC;IACf,MAAM,IAAI,GAAG,IAAI,CAAC,GAAG,EAAE,4BAA4B,CAAC,CAAC;IACrD,aAAa,CAAC,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IACpE,IAAI,CAAC;QACH,SAAS,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;IACzB,CAAC;IAAC,MAAM,CAAC;QACP,6CAA6C;IAC/C,CAAC;AACH,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,UAAU,oBAAoB;IAClC,MAAM,GAAG,GAAG,yBAAyB,EAAE,CAAC;IAExC,IAAI,CAAC,GAAG,EAAE,CAAC;QACT,OAAO,qBAAqB,EAAE,CAAC;IACjC,CAAC;IAED,MAAM,IAAI,GAAG,0BAA0B,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;IACzD,MAAM,MAAM,GAAG,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IAC3C,IAAI,CAAC,MAAM;QAAE,OAAO,IAAI,CAAC;IAEzB,OAAO;QACL,SAAS,EAAE,GAAG,CAAC,MAAM,CAAC,MAAM;QAC5B,WAAW,EAAE,MAAM,CAAC,WAAW;QAC/B,YAAY,EAAE,MAAM,CAAC,YAAY;QACjC,SAAS,EAAE,MAAM,CAAC,SAAS;QAC3B,OAAO,EAAE,MAAM,CAAC,OAAO;QACvB,KAAK,EAAE,MAAM,CAAC,KAAK;QACnB,IAAI,EAAE,MAAM,CAAC,IAAI;QACjB,IAAI,EAAE,MAAM,CAAC,IAAI;QACjB,sEAAsE;QACtE,6CAA6C;QAC7C,YAAY,EAAE,GAAG,CAAC,MAAM,CAAC,KAAK,IAAI,MAAM,CAAC,YAAY;QACrD,cAAc,EAAE,GAAG,CAAC,MAAM,CAAC,OAAO,IAAI,MAAM,CAAC,cAAc;QAC3D,gBAAgB,EAAE,MAAM,CAAC,gBAAgB;KAC1C,CAAC;AACJ,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,oBAAoB,CAAC,WAAwB;IAC3D,MAAM,GAAG,GAAG,yBAAyB,EAAE,CAAC;IAExC,IAAI,CAAC,GAAG,EAAE,CAAC;QACT,SAAS,CAAC,kBAAkB,EAAE,CAAC,CAAC;QAChC,aAAa,CAAC,wBAAwB,EAAE,EAAE,IAAI,CAAC,SAAS,CAAC,WAAW,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE;YAC9E,IAAI,EAAE,KAAK;SACZ,CAAC,CAAC;QACH,IAAI,CAAC;YACH,SAAS,CAAC,wBAAwB,EAAE,EAAE,KAAK,CAAC,CAAC;QAC/C,CAAC;QAAC,MAAM,CAAC;YACP,cAAc;QAChB,CAAC;QACD,OAAO;IACT,CAAC;IAED,MAAM,IAAI,GAAG,0BAA0B,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;IACzD,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG;QAC5B,WAAW,EAAE,WAAW,CAAC,WAAW;QACpC,YAAY,EAAE,WAAW,CAAC,YAAY;QACtC,SAAS,EAAE,WAAW,CAAC,SAAS;QAChC,OAAO,EAAE,WAAW,CAAC,OAAO;QAC5B,KAAK,EAAE,WAAW,CAAC,KAAK;QACxB,IAAI,EAAE,WAAW,CAAC,IAAI;QACtB,IAAI,EAAE,WAAW,CAAC,IAAI;QACtB,gBAAgB,EAAE,WAAW,CAAC,gBAAgB;QAC9C,mEAAmE;QACnE,4EAA4E;QAC5E,SAAS;QACT,YAAY,EAAE,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,WAAW,CAAC,YAAY;QACrE,cAAc,EAAE,GAAG,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,WAAW,CAAC,cAAc;KAC5E,CAAC;IACF,2BAA2B,CAAC,GAAG,CAAC,WAAW,EAAE,IAAI,CAAC,CAAC;AACrD,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,qBAAqB;IACnC,MAAM,GAAG,GAAG,yBAAyB,EAAE,CAAC;IAExC,IAAI,CAAC,GAAG,EAAE,CAAC;QACT,IAAI,CAAC;YACH,IAAI,UAAU,CAAC,wBAAwB,EAAE,CAAC,EAAE,CAAC;gBAC3C,UAAU,CAAC,wBAAwB,EAAE,CAAC,CAAC;YACzC,CAAC;QACH,CAAC;QAAC,MAAM,CAAC;YACP,SAAS;QACX,CAAC;QACD,OAAO;IACT,CAAC;IAED,MAAM,IAAI,GAAG,0BAA0B,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;IACzD,OAAO,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IACnC,2BAA2B,CAAC,GAAG,CAAC,WAAW,EAAE,IAAI,CAAC,CAAC;AACrD,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,+BAA+B,CAC7C,WAAmB,EACnB,OAAe;IAEf,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,0BAA0B,CAAC,WAAW,CAAC,CAAC;QACrD,IAAI,IAAI,CAAC,YAAY,CAAC,OAAO,CAAC,EAAE,CAAC;YAC/B,OAAO,IAAI,CAAC,YAAY,CAAC,OAAO,CAAC,CAAC;YAClC,2BAA2B,CAAC,WAAW,EAAE,IAAI,CAAC,CAAC;QACjD,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,8EAA8E;IAChF,CAAC;AACH,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,6BAA6B;IAC3C,MAAM,GAAG,GAAG,yBAAyB,EAAE,CAAC;IACxC,IAAI,CAAC,GAAG;QAAE,OAAO,EAAE,CAAC;IACpB,MAAM,IAAI,GAAG,0BAA0B,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;IACzD,OAAO,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;AACxC,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,kBAAkB,CAAC,KAAa,EAAE,OAAgB;IAChE,MAAM,GAAG,GAAG,yBAAyB,EAAE,CAAC;IAExC,IAAI,CAAC,GAAG,EAAE,CAAC;QACT,6DAA6D;QAC7D,MAAM,KAAK,GAAG,qBAAqB,EAAE,CAAC;QACtC,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,MAAM,IAAI,KAAK,CAAC,6CAA6C,CAAC,CAAC;QACjE,CAAC;QACD,KAAK,CAAC,YAAY,GAAG,KAAK,CAAC;QAC3B,KAAK,CAAC,cAAc,GAAG,OAAO,CAAC;QAC/B,SAAS,CAAC,kBAAkB,EAAE,CAAC,CAAC;QAChC,aAAa,CAAC,wBAAwB,EAAE,EAAE,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE;YACxE,IAAI,EAAE,KAAK;SACZ,CAAC,CAAC;QACH,OAAO;IACT,CAAC;IAED,8EAA8E;IAC9E,kFAAkF;IAClF,uEAAuE;IACvE,4DAA4D;IAC5D,IAAI,GAAG,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC;QACrB,oEAAoE;QACpE,OAAO;IACT,CAAC;IACD,MAAM,IAAI,GAAG,0BAA0B,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;IACzD,MAAM,IAAI,GAAG,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IACzC,IAAI,CAAC,IAAI,EAAE,CAAC;QACV,MAAM,IAAI,KAAK,CACb,iCAAiC,GAAG,CAAC,IAAI,iCAAiC,GAAG,CAAC,IAAI,UAAU,CAC7F,CAAC;IACJ,CAAC;IACD,IAAI,CAAC,YAAY,GAAG,KAAK,CAAC;IAC1B,IAAI,CAAC,cAAc,GAAG,OAAO,CAAC;IAC9B,2BAA2B,CAAC,GAAG,CAAC,WAAW,EAAE,IAAI,CAAC,CAAC;AACrD,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,oBAAoB;IAClC,MAAM,GAAG,GAAG,yBAAyB,EAAE,CAAC;IAExC,IAAI,CAAC,GAAG,EAAE,CAAC;QACT,MAAM,KAAK,GAAG,qBAAqB,EAAE,CAAC;QACtC,IAAI,CAAC,KAAK;YAAE,OAAO;QACnB,OAAO,KAAK,CAAC,YAAY,CAAC;QAC1B,OAAO,KAAK,CAAC,cAAc,CAAC;QAC5B,SAAS,CAAC,kBAAkB,EAAE,CAAC,CAAC;QAChC,aAAa,CAAC,wBAAwB,EAAE,EAAE,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE;YACxE,IAAI,EAAE,KAAK;SACZ,CAAC,CAAC;QACH,OAAO;IACT,CAAC;IAED,IAAI,GAAG,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC;QACrB,gFAAgF;QAChF,OAAO;IACT,CAAC;IACD,MAAM,IAAI,GAAG,0BAA0B,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;IACzD,MAAM,IAAI,GAAG,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IACzC,IAAI,CAAC,IAAI;QAAE,OAAO;IAClB,OAAO,IAAI,CAAC,YAAY,CAAC;IACzB,OAAO,IAAI,CAAC,cAAc,CAAC;IAC3B,2BAA2B,CAAC,GAAG,CAAC,WAAW,EAAE,IAAI,CAAC,CAAC;AACrD,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,qBAAqB;IACnC,OAAO,qBAAqB,EAAE,CAAC;AACjC,CAAC"}

package/dist/src/lib/csv.d.ts

@@ -0,0 +1,48 @@
+/**
+ * Parse a CSV string into an array of row objects keyed by header.
+ *
+ * Quote-aware: respects double-quoted fields that may contain the delimiter,
+ * embedded newlines, and escaped double-quotes (`""`). Empty-string cells are
+ * omitted from the row object (matching the client). Headers-only / empty
+ * input yields `[]`.
+ */
+export declare function parseCsv(csv: string, delimiter?: string): Record<string, string>[];
+/**
+ * Coerce a string cell to a target type. Mirrors the client's `coerceValue`:
+ * a failed number coercion returns the original string (so the server's
+ * schema validation surfaces a precise error rather than a silent bad write).
+ */
+export declare function coerceValue(value: string, type: string): any;
+/**
+ * Rename row keys per a `{ "CSV Header": "fieldName" }` map. Keys not present
+ * in the map are preserved. No-op when `map` is undefined.
+ */
+export declare function applyColumnMap(rows: Record<string, any>[], map: Record<string, string> | undefined): Record<string, any>[];
+export interface BuildRowsOptions {
+    /** Model name passed in each batch item's params. */
+    modelName: string;
+    /** Type coercion overrides keyed by (post-column-map) field name. */
+    types?: Record<string, string>;
+    /** CSV column whose value to use as the record id (else a ULID is generated). */
+    idColumn?: string;
+}
+export interface BatchItem {
+    params: {
+        modelName: string;
+        id: string;
+        data: Record<string, any>;
+    };
+}
+export interface BuildRowsResult {
+    batch: BatchItem[];
+    rowCount: number;
+}
+/**
+ * Apply type coercion, assign each row an id (from `idColumn` or a generated
+ * ULID), and shape rows into `executeBatch` items
+ * (`{ params: { modelName, id, data } }`). Mirrors steps 5–7 of the client's
+ * `importCsv`.
+ */
+export declare function buildRows(rows: Record<string, any>[], options: BuildRowsOptions): BuildRowsResult;
+/** Split an array into fixed-size chunks. */
+export declare function chunk<T>(items: T[], size: number): T[][];

package/dist/src/lib/csv.js

@@ -0,0 +1,177 @@
+/**
+ * CSV parsing + value coercion for `primitive databases import-csv`.
+ *
+ * This is a **thin port** of the client library's reference implementation
+ * (`src/client/api/databasesApi.ts` `parseCsv` :21 / `coerceValue` :94) so the
+ * CLI's import semantics match the client's `importCsv` exactly. It is a
+ * conscious 4th copy of the parser (client, web-admin, sample helper, now CLI);
+ * the shared-core extraction (design Option C) is deferred. **Parser edge-case
+ * fixes must be replicated across all copies** — see the plan-of-record
+ * duplication note (#145 Codex finding (b)).
+ *
+ * Zero dependencies beyond `ulid` (already a repo dependency).
+ */
+import { ulid } from "ulid";
+/**
+ * Parse a CSV string into an array of row objects keyed by header.
+ *
+ * Quote-aware: respects double-quoted fields that may contain the delimiter,
+ * embedded newlines, and escaped double-quotes (`""`). Empty-string cells are
+ * omitted from the row object (matching the client). Headers-only / empty
+ * input yields `[]`.
+ */
+export function parseCsv(csv, delimiter = ",") {
+    // Split into lines respecting quoted fields (which may contain newlines).
+    const lines = [];
+    let current = "";
+    let inQuotes = false;
+    for (let i = 0; i < csv.length; i++) {
+        const ch = csv[i];
+        if (ch === '"') {
+            if (inQuotes && i + 1 < csv.length && csv[i + 1] === '"') {
+                current += '"';
+                i++;
+            }
+            else {
+                inQuotes = !inQuotes;
+            }
+            current += ch;
+        }
+        else if ((ch === "\n" || ch === "\r") && !inQuotes) {
+            lines.push(current);
+            current = "";
+            if (ch === "\r" && i + 1 < csv.length && csv[i + 1] === "\n")
+                i++;
+        }
+        else {
+            current += ch;
+        }
+    }
+    if (current.length > 0)
+        lines.push(current);
+    const result = [];
+    if (lines.length === 0)
+        return result;
+    const parseRow = (line) => {
+        const fields = [];
+        let field = "";
+        let q = false;
+        let wasQuoted = false;
+        for (let i = 0; i < line.length; i++) {
+            const ch = line[i];
+            if (ch === '"') {
+                if (q && i + 1 < line.length && line[i + 1] === '"') {
+                    field += '"';
+                    i++;
+                }
+                else {
+                    q = !q;
+                    if (q)
+                        wasQuoted = true;
+                }
+            }
+            else if (ch === delimiter && !q) {
+                fields.push(wasQuoted ? field : field.trim());
+                field = "";
+                wasQuoted = false;
+            }
+            else {
+                field += ch;
+            }
+        }
+        fields.push(wasQuoted ? field : field.trim());
+        return fields;
+    };
+    const headers = parseRow(lines[0]);
+    for (let i = 1; i < lines.length; i++) {
+        const line = lines[i].trim();
+        if (!line)
+            continue;
+        const values = parseRow(line);
+        const row = {};
+        headers.forEach((h, idx) => {
+            if (values[idx] !== undefined && values[idx] !== "") {
+                row[h] = values[idx];
+            }
+        });
+        if (Object.keys(row).length > 0) {
+            result.push(row);
+        }
+    }
+    return result;
+}
+/**
+ * Coerce a string cell to a target type. Mirrors the client's `coerceValue`:
+ * a failed number coercion returns the original string (so the server's
+ * schema validation surfaces a precise error rather than a silent bad write).
+ */
+export function coerceValue(value, type) {
+    switch (type) {
+        case "number": {
+            const n = Number(value);
+            return isNaN(n) ? value : n;
+        }
+        case "boolean":
+            return value === "true" || value === "1" || value === "yes";
+        default:
+            return value;
+    }
+}
+/**
+ * Rename row keys per a `{ "CSV Header": "fieldName" }` map. Keys not present
+ * in the map are preserved. No-op when `map` is undefined.
+ */
+export function applyColumnMap(rows, map) {
+    if (!map)
+        return rows;
+    return rows.map((row) => {
+        const mapped = {};
+        for (const [key, value] of Object.entries(row)) {
+            const newKey = map[key] ?? key;
+            mapped[newKey] = value;
+        }
+        return mapped;
+    });
+}
+/**
+ * Apply type coercion, assign each row an id (from `idColumn` or a generated
+ * ULID), and shape rows into `executeBatch` items
+ * (`{ params: { modelName, id, data } }`). Mirrors steps 5–7 of the client's
+ * `importCsv`.
+ */
+export function buildRows(rows, options) {
+    const typeMap = options.types ?? {};
+    const batch = [];
+    for (const original of rows) {
+        const row = { ...original };
+        // Type coercion (only string cells, only declared types).
+        for (const [field, targetType] of Object.entries(typeMap)) {
+            if (field in row && typeof row[field] === "string") {
+                row[field] = coerceValue(row[field], targetType);
+            }
+        }
+        // Assign id.
+        let id;
+        if (options.idColumn && row[options.idColumn] != null) {
+            id = String(row[options.idColumn]);
+        }
+        else if (row.id != null) {
+            id = String(row.id);
+        }
+        else {
+            id = ulid();
+        }
+        row.id = id;
+        batch.push({ params: { modelName: options.modelName, id, data: row } });
+    }
+    return { batch, rowCount: batch.length };
+}
+/** Split an array into fixed-size chunks. */
+export function chunk(items, size) {
+    const out = [];
+    for (let i = 0; i < items.length; i += size) {
+        out.push(items.slice(i, i + size));
+    }
+    return out;
+}
+//# sourceMappingURL=csv.js.map

package/dist/src/lib/csv.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"csv.js","sourceRoot":"","sources":["../../../src/lib/csv.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AACH,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AAE5B;;;;;;;GAOG;AACH,MAAM,UAAU,QAAQ,CACtB,GAAW,EACX,SAAS,GAAG,GAAG;IAEf,0EAA0E;IAC1E,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,IAAI,OAAO,GAAG,EAAE,CAAC;IACjB,IAAI,QAAQ,GAAG,KAAK,CAAC;IACrB,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,GAAG,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACpC,MAAM,EAAE,GAAG,GAAG,CAAC,CAAC,CAAC,CAAC;QAClB,IAAI,EAAE,KAAK,GAAG,EAAE,CAAC;YACf,IAAI,QAAQ,IAAI,CAAC,GAAG,CAAC,GAAG,GAAG,CAAC,MAAM,IAAI,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,GAAG,EAAE,CAAC;gBACzD,OAAO,IAAI,GAAG,CAAC;gBACf,CAAC,EAAE,CAAC;YACN,CAAC;iBAAM,CAAC;gBACN,QAAQ,GAAG,CAAC,QAAQ,CAAC;YACvB,CAAC;YACD,OAAO,IAAI,EAAE,CAAC;QAChB,CAAC;aAAM,IAAI,CAAC,EAAE,KAAK,IAAI,IAAI,EAAE,KAAK,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,CAAC;YACrD,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;YACpB,OAAO,GAAG,EAAE,CAAC;YACb,IAAI,EAAE,KAAK,IAAI,IAAI,CAAC,GAAG,CAAC,GAAG,GAAG,CAAC,MAAM,IAAI,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,IAAI;gBAAE,CAAC,EAAE,CAAC;QACpE,CAAC;aAAM,CAAC;YACN,OAAO,IAAI,EAAE,CAAC;QAChB,CAAC;IACH,CAAC;IACD,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC;QAAE,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IAE5C,MAAM,MAAM,GAA6B,EAAE,CAAC;IAC5C,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,MAAM,CAAC;IAEtC,MAAM,QAAQ,GAAG,CAAC,IAAY,EAAY,EAAE;QAC1C,MAAM,MAAM,GAAa,EAAE,CAAC;QAC5B,IAAI,KAAK,GAAG,EAAE,CAAC;QACf,IAAI,CAAC,GAAG,KAAK,CAAC;QACd,IAAI,SAAS,GAAG,KAAK,CAAC;QACtB,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;YACrC,MAAM,EAAE,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC;YACnB,IAAI,EAAE,KAAK,GAAG,EAAE,CAAC;gBACf,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,IAAI,CAAC,MAAM,IAAI,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,GAAG,EAAE,CAAC;oBACpD,KAAK,IAAI,GAAG,CAAC;oBACb,CAAC,EAAE,CAAC;gBACN,CAAC;qBAAM,CAAC;oBACN,CAAC,GAAG,CAAC,CAAC,CAAC;oBACP,IAAI,CAAC;wBAAE,SAAS,GAAG,IAAI,CAAC;gBAC1B,CAAC;YACH,CAAC;iBAAM,IAAI,EAAE,KAAK,SAAS,IAAI,CAAC,CAAC,EAAE,CAAC;gBAClC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC;gBAC9C,KAAK,GAAG,EAAE,CAAC;gBACX,SAAS,GAAG,KAAK,CAAC;YACpB,CAAC;iBAAM,CAAC;gBACN,KAAK,IAAI,EAAE,CAAC;YACd,CAAC;QACH,CAAC;QACD,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC;QAC9C,OAAO,MAAM,CAAC;IAChB,CAAC,CAAC;IAEF,MAAM,OAAO,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;IACnC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACtC,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;QAC7B,IAAI,CAAC,IAAI;YAAE,SAAS;QACpB,MAAM,MAAM,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC;QAC9B,MAAM,GAAG,GAA2B,EAAE,CAAC;QACvC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,EAAE;YACzB,IAAI,MAAM,CAAC,GAAG,CAAC,KAAK,SAAS,IAAI,MAAM,CAAC,GAAG,CAAC,KAAK,EAAE,EAAE,CAAC;gBACpD,GAAG,CAAC,CAAC,CAAC,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC;YACvB,CAAC;QACH,CAAC,CAAC,CAAC;QACH,IAAI,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAChC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QACnB,CAAC;IACH,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,WAAW,CAAC,KAAa,EAAE,IAAY;IACrD,QAAQ,IAAI,EAAE,CAAC;QACb,KAAK,QAAQ,CAAC,CAAC,CAAC;YACd,MAAM,CAAC,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC;YACxB,OAAO,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;QAC9B,CAAC;QACD,KAAK,SAAS;YACZ,OAAO,KAAK,KAAK,MAAM,IAAI,KAAK,KAAK,GAAG,IAAI,KAAK,KAAK,KAAK,CAAC;QAC9D;YACE,OAAO,KAAK,CAAC;IACjB,CAAC;AACH,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,cAAc,CAC5B,IAA2B,EAC3B,GAAuC;IAEvC,IAAI,CAAC,GAAG;QAAE,OAAO,IAAI,CAAC;IACtB,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE;QACtB,MAAM,MAAM,GAAwB,EAAE,CAAC;QACvC,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC;YAC/C,MAAM,MAAM,GAAG,GAAG,CAAC,GAAG,CAAC,IAAI,GAAG,CAAC;YAC/B,MAAM,CAAC,MAAM,CAAC,GAAG,KAAK,CAAC;QACzB,CAAC;QACD,OAAO,MAAM,CAAC;IAChB,CAAC,CAAC,CAAC;AACL,CAAC;AAoBD;;;;;GAKG;AACH,MAAM,UAAU,SAAS,CACvB,IAA2B,EAC3B,OAAyB;IAEzB,MAAM,OAAO,GAAG,OAAO,CAAC,KAAK,IAAI,EAAE,CAAC;IACpC,MAAM,KAAK,GAAgB,EAAE,CAAC;IAC9B,KAAK,MAAM,QAAQ,IAAI,IAAI,EAAE,CAAC;QAC5B,MAAM,GAAG,GAAwB,EAAE,GAAG,QAAQ,EAAE,CAAC;QACjD,0DAA0D;QAC1D,KAAK,MAAM,CAAC,KAAK,EAAE,UAAU,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;YAC1D,IAAI,KAAK,IAAI,GAAG,IAAI,OAAO,GAAG,CAAC,KAAK,CAAC,KAAK,QAAQ,EAAE,CAAC;gBACnD,GAAG,CAAC,KAAK,CAAC,GAAG,WAAW,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,UAAU,CAAC,CAAC;YACnD,CAAC;QACH,CAAC;QACD,aAAa;QACb,IAAI,EAAU,CAAC;QACf,IAAI,OAAO,CAAC,QAAQ,IAAI,GAAG,CAAC,OAAO,CAAC,QAAQ,CAAC,IAAI,IAAI,EAAE,CAAC;YACtD,EAAE,GAAG,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC;QACrC,CAAC;aAAM,IAAI,GAAG,CAAC,EAAE,IAAI,IAAI,EAAE,CAAC;YAC1B,EAAE,GAAG,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QACtB,CAAC;aAAM,CAAC;YACN,EAAE,GAAG,IAAI,EAAE,CAAC;QACd,CAAC;QACD,GAAG,CAAC,EAAE,GAAG,EAAE,CAAC;QACZ,KAAK,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,EAAE,SAAS,EAAE,OAAO,CAAC,SAAS,EAAE,EAAE,EAAE,IAAI,EAAE,GAAG,EAAE,EAAE,CAAC,CAAC;IAC1E,CAAC;IACD,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,KAAK,CAAC,MAAM,EAAE,CAAC;AAC3C,CAAC;AAED,6CAA6C;AAC7C,MAAM,UAAU,KAAK,CAAI,KAAU,EAAE,IAAY;IAC/C,MAAM,GAAG,GAAU,EAAE,CAAC;IACtB,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,IAAI,IAAI,EAAE,CAAC;QAC5C,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC;IACrC,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC"}

package/dist/src/lib/db-codegen/dbFingerprint.d.ts

@@ -0,0 +1,10 @@
+/**
+ * Short fingerprint for a database-type TOML string (issue #814).
+ *
+ * Stamped in the header of every generated file so a human (or the
+ * `--check` CI guard) can tell at a glance whether the source TOML and the
+ * generated output are in sync. Mirrors codegen-v2's `fingerprintToml`
+ * (`packages/js-bao/src/cli/v2/fingerprint.ts`): 16 hex chars of SHA-256 —
+ * enough for a sanity check, short enough to fit on one comment line.
+ */
+export declare function fingerprintToml(tomlContent: string): string;

package/dist/src/lib/db-codegen/dbFingerprint.js

@@ -0,0 +1,17 @@
+/**
+ * Short fingerprint for a database-type TOML string (issue #814).
+ *
+ * Stamped in the header of every generated file so a human (or the
+ * `--check` CI guard) can tell at a glance whether the source TOML and the
+ * generated output are in sync. Mirrors codegen-v2's `fingerprintToml`
+ * (`packages/js-bao/src/cli/v2/fingerprint.ts`): 16 hex chars of SHA-256 —
+ * enough for a sanity check, short enough to fit on one comment line.
+ */
+import { createHash } from "crypto";
+export function fingerprintToml(tomlContent) {
+    return createHash("sha256")
+        .update(tomlContent, "utf-8")
+        .digest("hex")
+        .slice(0, 16);
+}
+//# sourceMappingURL=dbFingerprint.js.map

package/dist/src/lib/db-codegen/dbFingerprint.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"dbFingerprint.js","sourceRoot":"","sources":["../../../../src/lib/db-codegen/dbFingerprint.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,OAAO,EAAE,UAAU,EAAE,MAAM,QAAQ,CAAC;AAEpC,MAAM,UAAU,eAAe,CAAC,WAAmB;IACjD,OAAO,UAAU,CAAC,QAAQ,CAAC;SACxB,MAAM,CAAC,WAAW,EAAE,OAAO,CAAC;SAC5B,MAAM,CAAC,KAAK,CAAC;SACb,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;AAClB,CAAC"}